ODBC Access to Tables

Would anyone be able to tell me how you would know if your data is at risk from an 3rd paty ODBC connection? How can you protect against this?

Thanks

Not sure what database you are on, but we are on DB2/400.

Probably the surest way is to control the log-in ID that the third party tool uses and limit its authority. Any third party tool that we use has read only authority over the OneWorld objects Also, on the AS400 you can completely exclude certain users from certain files - I'm sure something similar exists for SQL and Oracle databases.

Thanks markdcci,

We have both AS400 GreenScreen A7.3 and OneWorld Xe. The data resides in a DB2 database on the AS400.

So, object security is a way to do it. But would this not be really time consuming for the security admin to manage?

You could use jdeDirect ODBC driver for JD Edwards, it’s a READ ONLY driver so you don’t have to worry about locking down the objects.
URL is http://www.unitysolutions.com/jdedirect/index.html

Hi

There are several ways but they all take upkeep and maintenance. Its not a one time shot. Or there's tools - as you're on a System i...always start at the roadmap:
http://www-03.ibm.com/servers/eserver/iseries/innovation/

Jen

There is a really good White Paper available from Oracle on the subject of plugging this security hole. We haven't implemented it yet, but we plan to. I've attached a copy.